Heap-based Out-of-Bounds Write in OpenSSL Products by OpenSSL
CVE-2025-68160
What is CVE-2025-68160?
A vulnerability has been identified in OpenSSL where writing large, newline-free data into a BIO chain can lead to a heap-based out-of-bounds write. This memory corruption can cause an application to crash, resulting in a Denial of Service. Although this issue typically affects third-party applications that utilize the line-buffering BIO filter under specific circumstances, it is not standard practice within TLS/SSL data paths. The potential for exploitation is considered low, limiting the contexts in which attackers could leverage this vulnerability.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.
Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.
Affected Version(s)
OpenSSL 3.6.0 < 3.6.1
OpenSSL 3.5.0 < 3.5.5
OpenSSL 3.4.0 < 3.4.4
References
Timeline
Vulnerability published
Vulnerability Reserved